Vulnerabilities

TI-2026-41777 CVE-2026-58016 · GHSA-8rpw-4xx7-27w7

Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"

MEDIUM 46

A flaw was found in GLib.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.0056 Published 2026-06-30 Partial fix · 2.89.0, 2.80.4-12.el10_2.14 +52 CWE-191

TI-2026-30432 CVE-2026-42055 · GHSA-78jw-ww3g-9wp7

NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability

MEDIUM 51

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.06537 Published 2026-06-17 Fixed in 1.31.2, 1.30.3 +2 CWE-122

TI-2026-36128 CVE-2026-48864 · GHSA-2927-mfhv-37vh

Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data

LOW 35

A flaw was found in libsolv.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00227 Published 2026-05-26 Fixed in 0.7.33-5.el10_2, 0.7.29-8.el10_0.1 +60 CWE-787

TI-2026-08132 CVE-2026-9256 · GHSA-h78r-86c6-jgp4

NGINX ngx_http_rewrite_module vulnerability

MEDIUM 55

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.10856 Published 2026-05-22 Partial fix · 37.0.1.1, R36 P5 +3 CWE-122

TI-2026-08044 CVE-2026-9149 · GHSA-9q56-xf64-q987

Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file

MEDIUM 62

A flaw was found in libsolv.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00312 Published 2026-05-20 Partial fix · 0.7.33-5.el10_2, 0.7.29-8.el10_0.1 +1 CWE-122

TI-2026-08045 CVE-2026-9150 · GHSA-p4w9-3pj8-mhq7

Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums

LOW 29

A flaw was found in libsolv.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00409 Published 2026-05-20 Partial fix · 0.7.33-5.el10_2, 0.7.29-8.el10_0.1 +2 CWE-121

TI-2026-01754 CVE-2026-2100 · GHSA-hq85-3f6c-jx84

P11-kit: null dereference via c_derivekey with specific null parameters

MEDIUM 41

A flaw was found in p11-kit.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01311 Published 2026-03-26 Partial fix · 0.26.2, 0.26.2-1.el10 +21 CWE-824

TI-2023-27712 CVE-2023-50782 · GHSA-3ww4-gg4f-jr7f

Python-cryptography: bleichenbacher timing oracle attack against rsa decryption - incomplete fix for cve-2020-25659

HIGH 66

A flaw was found in the python-cryptography package.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01118 Published 2024-02-05 Partial fix · 42.0.0 CWE-203

TI-2023-27711 CVE-2023-50781 · GHSA-944j-8ch6-rf6x

M2crypto: bleichenbacher timing attacks in the rsa decryption api - incomplete fix for cve-2020-25657

LOW 35

A flaw was found in m2crypto.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01124 Published 2024-02-05 No fix listed CWE-203

TI-2022-03352 CVE-2022-3644 · GHSA-qv37-mfjf-42h8

Insufficiently protected credentials in pulp_ansible

MEDIUM 58

The collection remote for pulp_ansible stores tokens in plaintext instead of using pulp's encrypted field and exposes them in read/write mode via the API () instead of marking it as write only.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00302 Published 2022-10-25 Partial fix · 0.15.0 CWE-256

TI-2013-03965 CVE-2013-4518 · GHSA-pv88-mwjw-4mh6

RHUI (Red Hat Update Infrastructure) 2.1.3 has world readable PKI entitlement certificates

LOW 24

RHUI (Red Hat Update Infrastructure) 2.1.3 has world readable PKI entitlement certificates

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00258 Published 2019-11-04 No fix listed CWE-200

Vulnerabilities

Filters